The remote host is affected by the vulnerability described in GLSA-200710-02 (PHP: Multiple vulnerabilities)

    Several vulnerabilities were found in PHP. Mattias Bengtsson and Philip     Olausson reported integer overflows in the gdImageCreate() and     gdImageCreateTrueColor() functions of the GD library which can cause     heap-based buffer overflows (CVE-2007-3996). Gerhard Wagner discovered     an integer overflow in the chunk_split() function that can lead to a     heap-based buffer overflow (CVE-2007-2872). Its incomplete fix caused     incorrect buffer size calculation due to precision loss, also resulting     in a possible heap-based buffer overflow (CVE-2007-4661 and     CVE-2007-4660). A buffer overflow in the sqlite_decode_binary() of the     SQLite extension found by Stefan Esser that was addressed in PHP 5.2.1     was not fixed correctly (CVE-2007-1887).
    Stefan Esser discovered an error in the zend_alter_ini_entry() function     handling a memory_limit violation (CVE-2007-4659). Stefan Esser also     discovered a flaw when handling interruptions with userspace error     handlers that can be exploited to read arbitrary heap memory     (CVE-2007-1883). Disclosure of sensitive memory can also be triggered     due to insufficient boundary checks in the strspn() and strcspn()     functions, an issue discovered by Mattias Bengtsson and Philip Olausson     (CVE-2007-4657)     Stefan Esser reported incorrect validation in the FILTER_VALIDATE_EMAIL     filter of the Filter extension allowing arbitrary email header     injection (CVE-2007-1900). NOTE: This CVE was referenced, but not fixed     in GLSA 200705-19.
    Stanislav Malyshev found an error with unknown impact in the     money_format() function when processing '%i' and '%n' tokens     (CVE-2007-4658). zatanzlatan reported a buffer overflow in the     php_openssl_make_REQ() function with unknown impact when providing a     manipulated SSL configuration file (CVE-2007-4662). Possible memory     corruption when trying to read EXIF data in exif_read_data() and     exif_thumbnail() occurred with unknown impact.
    Several vulnerabilities that allow bypassing of open_basedir and other     restrictions were reported, including the glob() function     (CVE-2007-4663), the session_save_path(), ini_set(), and error_log()     functions which can allow local command execution (CVE-2007-3378),     involving the readfile() function (CVE-2007-3007), via the Session     extension (CVE-2007-4652), via the MySQL extension (CVE-2007-3997) and     in the dl() function which allows loading extensions outside of the     specified directory (CVE-2007-4825).
    Multiple Denial of Service vulnerabilities were discovered, including a     long 'library' parameter in the dl() function (CVE-2007-4887), in     several iconv and xmlrpc functions (CVE-2007-4840 and CVE-2007-4783),     in the setlocale() function (CVE-2007-4784), in the glob() and     fnmatch() function (CVE-2007-4782 and CVE-2007-3806), a floating point     exception in the wordwrap() function (CVE-2007-3998), a stack     exhaustion via deeply nested arrays (CVE-2007-4670), an infinite loop     caused by a specially crafted PNG image in the png_read_info() function     of libpng (CVE-2007-2756) and several issues related to array     conversion.
  Impact :

    Remote attackers might be able to exploit these issues in PHP     applications making use of the affected functions, potentially     resulting in the execution of arbitrary code, Denial of Service,     execution of scripted contents in the context of the affected site,     security bypass or information leak.
  Workaround :

    There is no known workaround at this time.

According to its banner, the version of PHP installed on the remote host is older than 5.2.4.  Such versions may be affected by various issues, including but not limited to several overflows.

バナーによると、リモートホストにインストールされている PHP のバージョンは 5.2.4 より前です。これらのバージョンは、いくつかのオーバーフローを含むがそれらに限定されない、さまざまな問題の影響を受けることがあります。

バナーによると、リモートホストにインストールされているPHPのバージョンは4.4.8より前です。このようなバージョンは、「chunk_split」、「strcspn」、および「strspn」関数に関連する整数オーバーフローや「safe_mode」/「open_basedir」のバイパスを含む、いくつかの問題の影響を受ける可能性があります。

根據其標題，遠端主機上安裝的 PHP 版本舊於 5.2.4。這些版本可能受到多個問題影響，包括但不限於一些溢位。

The PHP development team reports :

Security Enhancements and Fixes in PHP 5.2.4 :

- Fixed a floating point exception inside wordwrap() (Reported by Mattias Bengtsson)

- Fixed several integer overflows inside the GD extension (Reported by Mattias Bengtsson)

- Fixed size calculation in chunk_split() (Reported by Gerhard Wagner)

- Fixed integer overflow in str[c]spn(). (Reported by Mattias Bengtsson)

- Fixed money_format() not to accept multiple %i or %n tokens.
(Reported by Stanislav Malyshev)

- Fixed zend_alter_ini_entry() memory_limit interruption vulnerability. (Reported by Stefan Esser)

- Fixed INFILE LOCAL option handling with MySQL extensions not to be allowed when open_basedir or safe_mode is active. (Reported by Mattias Bengtsson)

- Fixed session.save_path and error_log values to be checked against open_basedir and safe_mode (CVE-2007-3378) (Reported by Maksymilian Arciemowicz)

- Fixed a possible invalid read in glob() win32 implementation (CVE-2007-3806) (Reported by shinnai)

- Fixed a possible buffer overflow in php_openssl_make_REQ (Reported by zatanzlatan at hotbrev dot com)

- Fixed an open_basedir bypass inside glob() function (Reported by dr at peytz dot dk)

- Fixed a possible open_basedir bypass inside session extension when the session file is a symlink (Reported by c dot i dot morris at durham dot ac dot uk)

- Improved fix for MOPB-03-2007.

- Corrected fix for CVE-2007-2872.

New php-4.4.8 packages are available for Slackware 10.2 and 11.0 to fix security issues.

根据其标题，远程主机上安装的 PHP 版本早于 5.2.4。此类版本可能会受到各种问题的影响，包括但不限于多个溢出。

根據其標題，遠端主機上安裝的 PHP 版本舊於 4.4.8。這些版本可能受到數個問題影響，包括涉及 'chunk_split'、'strcspn' 和 'strspn' 函式的整數溢位，以及 'safe_mode'/'open_basedir' 繞過。

According to its banner, the version of PHP installed on the remote host is older than 4.4.8.  Such versions may be affected by several issues, including integer overflows involving the 'chunk_split', 'strcspn', and 'strspn' functions, and 'safe_mode' / 'open_basedir' bypasses.

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-002 applied. 

This update contains several security fixes for a number of programs.

The remote host is running a version of PHP 5.x prior to 5.2.4. This version of PHP is vulnerable to at least 120 distinct security flaws impacting confidentiality, integrity and availability. 

According to its banner, the version of PHP 4.x installed on the remote host is older than 4.4.8.  Such versions may be affected by several issues, including integer overflows involving the 'chunk_split', 'strcspn', and 'strspn' functions, and 'safe_mode' / 'open_basedir' bypasses. 

The remote host is running a version of PHP prior to 5.2.4.  This version of PHP is vulnerable to at least 120 distinct security flaws impacting confidentiality, integrity and availability.

ID	名稱	產品	系列	已發布	已更新	嚴重性
26942	GLSA-200710-02 : PHP: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2007/10/9	2021/1/6	high
25971	PHP < 5.2.4 Multiple Vulnerabilities	Nessus	CGI abuses	2007/9/3	2024/5/31	medium
25971	PHP < 5.2.4 の複数の脆弱性	Nessus	CGI abuses	2007/9/3	2024/5/31	medium
29833	PHP < 4.4.8 の複数の脆弱性	Nessus	CGI abuses	2008/1/3	2024/5/31	high
25971	PHP < 5.2.4 多種弱點	Nessus	CGI abuses	2007/9/3	2024/5/31	medium
26038	FreeBSD : php -- multiple vulnerabilities (71d903fc-602d-11dc-898c-001921ab2fa4)	Nessus	FreeBSD Local Security Checks	2007/9/14	2021/1/6	high
31101	Slackware 10.2 / 11.0 : php (SSA:2008-045-03)	Nessus	Slackware Local Security Checks	2008/2/18	2021/1/14	high
25971	PHP < 5.2.4 多种漏洞	Nessus	CGI abuses	2007/9/3	2024/5/31	medium
29833	PHP < 4.4.8 多種弱點	Nessus	CGI abuses	2008/1/3	2024/5/31	high
29833	PHP < 4.4.8 Multiple Vulnerabilities	Nessus	CGI abuses	2008/1/3	2024/5/31	high
31605	Mac OS X Multiple Vulnerabilities (Security Update 2008-002)	Nessus	MacOS X Local Security Checks	2008/3/19	2018/7/14	critical
4202	PHP 5.x < 5.2.4 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	2007/8/31	2019/3/6	high
4331	PHP 4.x < 4.4.8 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	2015/4/10	2019/3/6	medium
801099	PHP < 5.2.4 Multiple Vulnerabilities	Log Correlation Engine	Web Servers			medium
801101	PHP < 4.4.8 Multiple Vulnerabilities	Log Correlation Engine	Web Servers			high

偵測

搜尋 Plugin

high

medium

medium

high

medium

high

high

medium

high

high

critical

high

medium

medium

high